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Method and circuit arran pement for thej nomt^rim an d man agement of data traffic in a 
communication system with several communication nodes ^ 



The invention concerns a method and a circuit arrangement for the monitoring 
and management of data traffic in a communication system with several communication 
nodes, with which it is possible to operate communication systems with autonomous media 
access control. 

5 Timed communication protocols are proposed for distributed real-time 

computer systems, as used in, for example, the automobile industry. Communication 
programs of this kind are described in, for example, S. Polenda, G. Kroiss "TTP: *Drive by 
Wire' in greifbarer NShe" Elektronik, No. 14, 1999, p.p. 36 to 43, and J. Berwanger et al 
"FlexRay - The Communication System for Advanced Automotive Control Systems", SAE 

1 0 World Congress 2001 . In these systems, the media access protocol is based on a time- 
division multiplex method such as TDMA (Time Division Multiple Access) with a static 
communication time schedule which is defined in advance during system design. This 
schedule defines for each communication node the times at which it may transmit data within 
a communication cycle. In timed communication protocols of this kind it may happen, 

1 5 without further protective measures being taken, that a single defective node, also known as a 
"babbling idiot", which is constantly transmitting also outside the allocated time slots blocks 
the entire data traffic. 

In order to prevent this, access to the transmission medium is generally 
protected by a bus monitor for the said protocols, as described in, for example, C. Temple 

20 "Avoiding the Babbling-Idiot Failure in a Time-Triggered Communication System" at the 
28* Annual International Symposium on Fault-Tolerant Computing, Munich, Germany, in 
June 1998. The bus monitor has an independent time basis and is equipped with a scheduler, 
which allows write access to the medium only during the time slots reserved for a 
communication node and during short tolerance areas before and after these time slots. If the 

25 bus monitor establishes that a communication node is attempting to write to the data bus 
outside the time period reserved for it, it stops this access, reports an error state and 
permanently blocks fiirther bus access by this communication node. The bus monitor thus 
ensures the fail-silent property of a commxmication node. 
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In principle, each of the communication nodes in the distributed arrangement 
can be equipped with its own bus monitor but, in the case of star networks, solutions with a 
central bus monitor are also possible; this central bus monitor monitors the communication of 
all nodes connected to a star coupler. A detailed description of a central bus monitor of this 
5 kind can be found in WO 01/13230 Al, for example. 

The commimication controllers located in the communication nodes in the 
distributed airangement and the bus monitor(s) should operate as independently of one 
another as possible, but their communication time schedules have to be synchronized at least 
once during initialization. Normally, this synchronization is additionally repeated at regular 

10 intervals, for example, once at the start of each communication cycle. In the case of solutions 
with bus monitors in a decentralized arrangement in the communication nodes, such 
synchronization can easily be achieved with the aid of suitable control signals from the 
communication controllers. To synchronize the communication controllers in a distributed 
arrangement with one another, algorithms for global clock synchronization are generally 

15 used. Using a suitable design of the interface between the bus monitor and the 

communication controller, bus monitors in a decentralized arrangement can also follow the 
corrections for global clock synchronization. 

In the case of star networks with active network couplers, hereinafter 
designated active star couplers, the communication nodes are usually connected to a star 

20 coupler via point-to-point connections. The data transmitted by a communication node is 
passed on to all other communication nodes with the aid of the distribution unit in the star 
coupler. Apart from the data lines, central bus monitors should require no additional 
connections to the communication controllers to be monitored. The synchronization of the 
bus monitor with the connected communication controllers, therefore, has to take place in a 

25 manner other than that in the case of bus monitors in a decentralized arrangement. One option 
that suggests itself is the integration of the central bus monitor with an allocated 
communication controller. This communication controller can actively synchronize itself 
with the other communication controllers in the network, and also transmit data, for example 
status information, via predefined time slots. Owing to the spatial proximity, it is possible to 

30 synchronize the central bus monitor with the communication time schedule of this 

communication controller with the aid of suitable control lines. A disadvantage of this 
method is the great dependence on the correct fiinctioning of this conununication controller. 

It is an object of the invention to provide a method of the type specified above, 
in which a central bus monitor is synchronized with the time-division multiplex schematic 
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and the global clock time of the communication nodes in a distributed arrangement. A circuit 
arrangement with which the method according to the invention can be realized will also be 
specified. 

This object is achieved by a method as claimed in claim 1 and a circuit 
5 arrangement as claimed in claim 7. Advantageous embodiments of the method according to 
the invention and the circuit arrangement according to the invention are the subject matter of 
the related dependent claims. 

The method according to the invention for monitoring and managing data 
trafGc in a communication system with several communication nodes which communicate 
10 via interfaces, monitored by a bus monitor, comprises the following steps: 

a) provision of a predefined communication time schedule for all 
communication nodes» 

b) initialization of the bus monitor, 

c) synchronization of the bus monitor's communication time schedule with the 
15 predefined communication time schedule executed by the communication nodes in a 

distributed arrangement, the synchronization taking place on the basis of activities observed 
at the interfaces, 

d) monitoring of the activities of the communication nodes by the bus monitor, 

e) comparison of the activities with the predefined communication time 

20 schedule, and 

f) deactivation of the interface for a communication node for which an activity 
not compatible with the predefined communication time schedule has been detected. 

The bus monitor monitors activities at all star interfaces and, with its own 
communication schematic, controls the access of all communication nodes to the distribution 
25 unit. 

"Activities'* should be imderstood herein as the state transitions fi-om 
"inactive" to "active" and fi-om "active" to "inactive". Observation of these state transitions 
or activities gives rise to the monitoring of the communication time schedule of the 
communication nodes, and the comparison with the predefined communication time schedule 
30 of the bus monitor, as well as the synchronization of the predefined communication time 
schedule for the central bus monitor with the communication time schedule of the 
communication nodes in a distributed arrangement. Since, as opposed to known solutions, 
decoding of the received data packets is not necessary, the method according to the invention 
can be used for communication systems with the most diverse coding methods. 
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The bus monitor conjointly monitor the communication time schedule for all 
connected communication nodes. In addition, or as an alternative, the activities observed at a 
particular interface can be specifically compared with the communication time schedule for 
the communication node connected to this interface. In this manner, the incorrected behavior 
5 of a communication node, which, for example, is transmitting data in all time slots, can be 
recognized even before the synchronization of the bus monitor is completed. Depending on 
the requirements of the planned use, the associated interface could then be deactivated at an 
early stage, which could even prevent a disturbance of the system start-up. This property is 
particularly important in communication systems in which the protective function of the bus 
10 monitor has to remain deactivated after switch-on until the communication time schedules of 
the bus monitor and the communication nodes or their commimication controllers have been 
synchronized. 

In the initialization phase, the activities of the communication controllers will, 
in some circumstances, not yet comply with the predefined communication time schedule. 

15 Discrepancies can occur as a result of, for example, individual communication controllers 
integrating into the network only after a delay, or media access conflicts having to be 
resolved. During this period, the bus monitor allows sustained write access by the 
communication controllers and restricts itself to the observation of the activities. The 
activities observed are continuously compared with a synchronization pattern which is part of 

20 the communication time schedule for the bus monitor. 

If a central bus monitor according to the invention is used to monitor the 
activities, no additional conmiunication controller is necessary for its control, so one possible 
error source is dispensed with. 

Various methods may be used for the synchronization of the communication 

25 time schedule in the central bus monitor. If, for example, special symbols or data packets of 
differing lengths, such as SOC (Start Of Cycle) frames, are used to identify the start of a 
communication cycle when the communication time schedule is defined, these data packets 
can be easily recognized and used for synchronization. Special data packets of this kind do 
not necessarily have to be located at the start of a communication cycle, but clear allocation 

30 to a known instant within the communication cycle must be possible. A further option is the 
use of a predefined sequence of data packets for identifying a known instant within the 
communication cycle. 
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In addition, a continuous synchronization of the bus monitor with the global 
clock time of the communication system in line with the understanding of the communication 
controllers in a distributed arrangement is necessary. 

The state transitions "inactive" to "active" or "active" to "inactive" recognized 
5 by the activity detectors at the star interfaces are also used for this clock synchronization of 
the bus monitor. In most time-controlled communication protocols, the instant for the start of 
a data packet is suitable as the reference for the clock synchronization. This instant can be 
recognized by the bus monitor as a state transition from "inactive" to "active". Following 
synchronization of the commimication time schedule, the bus monitor can pre-calculate, with 

10 the aid of its local clock, the instants at which the state transitions for identification of the 
start of a data packet are expected. In addition, it can define expectation windows which 
define areas around the expectation instants within which a state transition is regarded as a 
permitted starting instant of a data packet. 

For each data packet received, the bus monitor determines the discrepancy 

15 between the expected and the actually observed state transition. This discrepancy is 

determined independently for each communication node connected, and used for correcting 
the local time of the bus monitor. In the simplest case, this correction can take place in such a 
way that, on arrival of each data packet within the calculated expectation window, the local 
time is matched to the instant observed. However, one disadvantage of this method consists 

20 in the fact that a communication node with a defective local clock would directly influence 
the local time of the bus monitor. If the measured discrepancies of the starting instants of data 
packets of multiple communication nodes are included in the correction, an error-tolerant 
correction of the local time of the bus monitor can then be achieved. Known algorithms can 
then be used for global clock synchronization. 

25 Synchronization of the communication controllers with one another usually 

takes place with the aid of known methods for global clock synchronization, as described in, 
for example, H. Kopetz et al "A synchronization strategy for a time-triggered multicluster 
real-time system", Proceedings, 14*** Symposium on Reliable Distributed Systems, Bad 
Neuenahr, Germany, 13 to 15 September 1995. 

30 After initialization, a central bus monitor must remain deactivated, thereby 

permitting the unprotected transmission of all data packets sent, until its communication time 
schedule is synchronized with the communication time schedule of the conmiunication nodes 
in a distributed arrangement. Only when synchronization has taken place does the bus 
nionitor start to pass on data packets from one transmitting communication node to the other 
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nodes, e.g. via a distribution vmit, only according to the predefined communication time 
schedule. 

The invention also describes a circuit arrangement for monitoring and 
managing the data traffic in a communication system with several communication nodes 
5 which communicate with one another via interfaces, which circuit arrangement includes: 

- at least one active star coupler with connected communication nodes, there 
being provided a predefined communication time schedule for all communication nodes, and 

- a central bus monitor which is connected to the active star coupler, after 
initialization of the bus monitor the communication time schedule of the bus monitor being 

1 0 synchronized with the predefined conununication time schedule executed by the 

communication nodes in a distributed arrangement, which synchronization takes place on the 
basis of activities observed at the interfaces, which bus monitor monitors the activities of the 
communication nodes, compares the activities with the predefined communication time 
schedule, and deactivates the interface for a node for which an activity not compatible with 
1 5 the predefined communication time schedule has been detected. 

Each interface is preferably equipped with at least one activity detector. If the 
interfaces for directional control in the star coupler are equipped with activity detectors 
an)avay, advantage can then be taken of this fact. 

A distribution unit which passes on the signals received fi-om a communication 
20 node to the other conununication nodes may be provided, but is not absolutely essential. 

It may also be made arranged to make available an activity detector for the bus 
monitor, which monitors the activities of the star point in the active star coupler. Only the 
information concerning the instant of a change of state will then be available here. However, 
the bus monitor cannot recognize the allocation of an activity to an interface. This 
25 embodiment has the advantage that it can also be realized with bus drivers which do not 
make any activity signal available. 

In the case of star networks with active star couplers, the bus monitor may be 
advantageously combined with the active star coupler to form one unit. The costs and space 
requirement of an active star coupler with an integrated bus monitor of this kind can be 
30 reduced through the use of the method according to the invention. 

When at least one circuit arrangement according to the present invention is 
used, the bus monitor allows access of the connected communication nodes to, for example, 
the distribution unit of the active star coupler only in accordance with its own commimication 
time schedule. If several circuit arrangements are used in a time-controlled communication 
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system with active multiple star topology, this also includes the communication between 
active star couplers. Fields of application can be found, for in the automobile and 
aeronautical industries. 

5 

The invention will be further described with reference to embodiments as 
shown in the drawings, to which, however, the invention is not restricted. 

Fig. 1 shows a diagram of an embodiment of an active star coupler with a bus 
monitor according to the present invention, 
10 Fig. 2 shows a diagram of an embodiment similar to Fig. 1 , but without a 

distribution unit, 

Fig. 3 shows a diagram of a further simplified embodiment with an additional 
activity detector for the bus monitor. 

Fig. 4 shows an example of a communication time schedule, and 
15 Fig, 5 shows a further example of a communication time schedule. 



Fig. 1 shows an embodiment of an active star coupler with communication 
nodes 10, 20, 30 which lead, via allocated bi-directional bus drivers 12, 22, 32, to a star point 

20 40 and are connected to a distribution unit SO, which distributes received data. Each bus 

driver 12, 22, 32 consists of a transmitting path and a receiving path which are realized in the 
usual manner by means of amplifiers AS and AE. The distribution unit 50 may be executed, 
for example, in digital form as a "finite state machine". Connected to the bus drivers 12, 22, 
32 and the distribution unit 50 is a bus monitor 60 whereto a host controller 70 is connected 

25 for the control and configuration of the bus monitor 60. Each of the bus drivers 12, 22, 32 is 
equipped with an activity detector 14, 24, 34, which is connected in the receiving path of the 
relevant bus driver 12, 22, 32 in such a way that it can recognize activities on the receiving 
path and report them to the bus monitor 60. In the basic state shown, all bus drivers 12, 22, 
32 operate as receivers and the bus monitor 60 allows sustained write access by the 

30 communication nodes. If data from the connected communication node 10, 20 or 30, for 
example, from the node 30, now arrives at one of the interfaces, the associated activity 
detector 34 reports this to the distribution unit 50. This unit then controls the switch S2 in the 
other bus drivers 10, 20, so that they are switched to transmit. This enables the distribution of 
the received data to the communication nodes 10, 20. The distribution unit 50 can recognize 
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media access conflicts in activities reported from multiple interfaces simultaneously, and can 
resolve them by, for example, priority control. This basic function of the active star coupler is 
supplemented by the bus monitor 60 to the effect that it evaluates the activity signals from the 
individual bus drivers and, with the aid of the switch SI, can permit or deny, via control 
5 lines, write access by the connected communication nodes. 

Fig. 2 shows an alternative embodiment which is not equipped with a 
distribution unit. Each bus driver 12, 22, 32 is provided with an activity detector 14, 24, 34 
for the received signal, and an activity detector 16, 26, 36 for the transmitted signal. In the 
switch position shown, for a received data packet, activity at one interface is first detected by 

10 the activity detector 14 and, after a short delay, also by the activity detector 16. In the case of 
a signal transmitted from the star point to the interface, activity is detected only by the 
activity detector 16. From the states and the variation of the two activity signals in time, a 
control unit, which is designated in the diagram with 18 and 28, 38, derives the control signal 
for the change of direction by the switch S2. A control of this kind is known fi-om the patent 

1 5 application . . . (ID 605940 "Active star without data loss") which has not yet been laid open. 
As in the embodiment shown in Fig. 1 , the bus monitor 60 receives independent activity 
signals from all bus drivers 12, 22, 32, and controls write access by the commtmication nodes 
10, 20, 30 through each time the switch SI in the bus drivers. 

A further embodiment is shown in Fig. 3. The bus monitor 60 is equipped with 

20 its own activity detector 62 for monitoring the activities at the star point 40. As opposed to 
the circuit configurations shown in Fig. 1 and Fig. 2, only the information concerning the 
instant of a change of state is available here. The allocation of an activity to an interface 
cannot be recognized by the bus monitor 60. However, the method according to the invention 
can now also be realized with bus drivers which do not make available any activity signal. 

25 With the aid of the signals from the activity detectors, the bus monitor 60 

receives information concerning the currently observed state "active" or "inactive" at the data 
inputs of the star coupler. It can determine therefrom the instants for the state transitions and 
hence the instants and the duration of the transmitted data packets. In the embodiments as 
shown in Fig. 1 and Fig. 2, the activity signals from each interface of the nodes 10, 20, 30 are 

30 fed to bus monitor 60. It can, therefore, compare both the activities at individual interfaces 
and all activities jointly with its predefined communication time schedule. This 
communication time schedule can either be transferred to the bus monitor 60 by host the 
controller 70 via a communication interface 80 or, if a simplified circuit arrangement is used. 
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can be stored in a read-only memory of the bus monitor 60, for example, a ROM or a 
FLASH. 

Options for the synchronization of the communication cycle will be described 
with reference to the Figs. 4 and 5. 
5 Fig. 4 shows an example of a communication time schedule in which precisely 

one data packet is provided, the length of which differs from the length of all other data 
packets. As soon as the bus monitor recognizes this data packet on the basis of its length, it 
can synchronize its communication time schedule. It is not necessary now to know the 
allocation of data packets to star interfaces. In the example shown, the duration of the SOC 

10 symbol differs from the duration of all other data packets. The SOC symbol is transmitted 
periodically at the start of the communication cycle. As a result, incorrect synchronization 
through random glitches can be prevented. To this end, on expiry of a communication cycle, 
the bus monitor defines a SOC expectation window and does not execute the synchronization 
of its local clock until the start of an SOC symbol has again been recognized within this 

1 5 window. 

Fig. 5 shows an example of a communication time schedule which provides a 
sequence of regular data packets which, including their allocation to star interfaces, occur 
only once within the time-division multiplex frame. This sequence should be selected such 
that it cannot be confiised with other sequences occurring, not even if one of the data packets 

20 belonging to this sequence is missing, thus enabling a synchronization even on failure of a 
communication node. By way of example. Fig. 5 contains the sequence: frame 2 - frame 3 - 
frame 4 for the synchronization. 

A combination of the two options described contributes to increasing the 
reliability of the synchronization. 

25 The bus monitor can store the observed instants of activities on the data lines 

for the duration of a complete communication cycle and then, in a second step, determine the 
correct synchronization by comparing or correlating these instants with the communication 
time schedule. 

As soon as the observed activities of the communication nodes coincide 
30 imambiguously with the predefined synchronization pattern or synchronization symbol, the 
bus monitor can synchronize its communication time schedule. Only after this does it execute 
its actual protection function and, with the aid of the switch SI in the bus drivers, permits 
write access by the communication nodes only according to its own communication time 
schedule. 
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Should a communication node transmit data outside of the time slots enabled 
for this communication node according to the bus monitor's communication time schedule, 
the switch SI blocks access to the distribution unit. With the aid of the signals from the 
activity detectors, the bus monitor can recognize such an infringement of the time schedule 
5 and report it to the host controller. Depending on the application, the host controller can 
independently block the access for a communication node with incorrect time behavior, or 
can report this defect to a higher-level diagnostic unit which then, for example, initiates a 
reset of the defective communication node. 

As already explained above, in addition to the synchronization of the bus 
10 monitor with the communication time schedule of the connected communication nodes, it 
must also be ensured that the local clock of the bus monitor is synchronized with the local 
clocks of the communication nodes and that these nodes are synchronized with one another. 



